KCM comes with ready made compliance templates (e.g. PCI and HIPAA) and also allows the IT manager to create their own requirements within the application giving them the ability to track compliance with additional security policies and standards or regulations such as OSHA or FISMA. According to a study done by KnowBe4, a security awareness training and compliance firm, and research firm ITIC, 80